Payment Card Industry Data Security Standard (PCI DSS)
PCI Security Vendor Alliance
The PCI Security Vendor Alliance was formed to provide products and services for the members of the payment card industry including retailers, e-Commerce companies, financial institutions, payment processors, POS vendors and any other organizations that must achieve compliance with the PCI Data Security Standards. The PCI Security Vendor Alliance will also complement the objectives of the major card payment brands by helping educate the businesses affected by the PCI DSS about the requirements and business value of the Payment Card Industry (PCI) Data Security Standard, a global benchmark intended to improve security throughout the entire payment card transaction process. To demonstrate the business value of PCI DSS solutions and their value in meeting other regulatory privacy and data security directives, the PCI SVA also plans to create a series of case studies, seminars, return-on-investment analyses, and white papers showing how organizations may achieve compliance with the PCI DSS requirements efficiently and on-budget.
The members of the PCI SVA have reviewed all of various national, state and industry data security and privacy regulations, and we have concluded that the PCI DSS represent the absolute most specific, comprehensive set of data security and privacy requirements available anywhere, and are applicable as a set of guidelines for protecting confidential data throughout the value chain of ANY industry. That is, even though the PCI DSS are aimed at a single industry, and focus specifically on credit card data, we believe these same standards are applicable to the protection of all classes of sensitive or confidential data, in all industries where such data is collected, communicated, processed or retained. One of the objectives of the PCI SVA is to help our customers adapt and extend the PCI DSS to embrace other sensitive data elements.
The PCI Security Vendor Alliance is an independent group of vendors who see tremendous value in the standards managed by the council, but the PCI SVA is not formally a member of the PCI Security Standards Council™. Individual vendors who are members of the SVA may be members of the council. Rapid7 is an Approved Scanning Vendor